chore: import upstream snapshot with attribution

apps/sim/app/api/tools/sftp/mkdir/route.ts

@@ -0,0 +1,146 @@
+import { createLogger } from '@sim/logger'
+import { getErrorMessage } from '@sim/utils/errors'
+import { type NextRequest, NextResponse } from 'next/server'
+import type { SFTPWrapper } from 'ssh2'
+import { sftpMkdirContract } from '@/lib/api/contracts/storage-transfer'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { generateRequestId } from '@/lib/core/utils/request'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import {
+  createSftpConnection,
+  getSftp,
+  isPathSafe,
+  sanitizePath,
+  sftpExists,
+} from '@/app/api/tools/sftp/utils'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('SftpMkdirAPI')
+
+/**
+ * Creates directory recursively (like mkdir -p)
+ */
+async function mkdirRecursive(sftp: SFTPWrapper, dirPath: string): Promise<void> {
+  const parts = dirPath.split('/').filter(Boolean)
+  let currentPath = dirPath.startsWith('/') ? '' : ''
+
+  for (const part of parts) {
+    currentPath = currentPath
+      ? `${currentPath}/${part}`
+      : dirPath.startsWith('/')
+        ? `/${part}`
+        : part
+
+    const exists = await sftpExists(sftp, currentPath)
+    if (!exists) {
+      await new Promise<void>((resolve, reject) => {
+        sftp.mkdir(currentPath, (err) => {
+          if (err && !err.message.includes('already exists')) {
+            reject(err)
+          } else {
+            resolve()
+          }
+        })
+      })
+    }
+  }
+}
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  const requestId = generateRequestId()
+
+  try {
+    const authResult = await checkInternalAuth(request, { requireWorkflowId: false })
+
+    if (!authResult.success) {
+      logger.warn(`[${requestId}] Unauthorized SFTP mkdir attempt: ${authResult.error}`)
+      return NextResponse.json(
+        { success: false, error: authResult.error || 'Authentication required' },
+        { status: 401 }
+      )
+    }
+
+    logger.info(`[${requestId}] Authenticated SFTP mkdir request via ${authResult.authType}`, {
+      userId: authResult.userId,
+    })
+
+    const parsed = await parseRequest(sftpMkdirContract, request, {})
+    if (!parsed.success) return parsed.response
+    const params = parsed.data.body
+
+    if (!isPathSafe(params.remotePath)) {
+      logger.warn(`[${requestId}] Path traversal attempt detected in remotePath`)
+      return NextResponse.json(
+        { error: 'Invalid remote path: path traversal sequences are not allowed' },
+        { status: 400 }
+      )
+    }
+
+    logger.info(`[${requestId}] Connecting to SFTP server ${params.host}:${params.port}`)
+
+    const client = await createSftpConnection({
+      host: params.host,
+      port: params.port,
+      username: params.username,
+      password: params.password,
+      privateKey: params.privateKey,
+      passphrase: params.passphrase,
+    })
+
+    try {
+      const sftp = await getSftp(client)
+      const remotePath = sanitizePath(params.remotePath)
+
+      logger.info(
+        `[${requestId}] Creating directory ${remotePath} (recursive: ${params.recursive})`
+      )
+
+      if (params.recursive) {
+        await mkdirRecursive(sftp, remotePath)
+      } else {
+        const exists = await sftpExists(sftp, remotePath)
+        if (exists) {
+          return NextResponse.json(
+            { error: `Directory already exists: ${remotePath}` },
+            { status: 409 }
+          )
+        }
+
+        await new Promise<void>((resolve, reject) => {
+          sftp.mkdir(remotePath, (err) => {
+            if (err) {
+              if (err.message.includes('No such file')) {
+                reject(
+                  new Error(
+                    'Parent directory does not exist. Use recursive: true to create parent directories.'
+                  )
+                )
+              } else {
+                reject(err)
+              }
+            } else {
+              resolve()
+            }
+          })
+        })
+      }
+
+      logger.info(`[${requestId}] Successfully created directory ${remotePath}`)
+
+      return NextResponse.json({
+        success: true,
+        createdPath: remotePath,
+        message: `Successfully created directory ${remotePath}`,
+      })
+    } finally {
+      client.end()
+    }
+  } catch (error) {
+    const errorMessage = getErrorMessage(error, 'Unknown error occurred')
+    logger.error(`[${requestId}] SFTP mkdir failed:`, error)
+
+    return NextResponse.json({ error: `SFTP mkdir failed: ${errorMessage}` }, { status: 500 })
+  }
+})